Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier: o9QYU8XZFgc6pJbTcjwPpvU7hJSowyUU3msHbNFMCrI=
Subject key identifier: 1E:2A:F1:BD:75:8B:79:3D:3D:2B:DF:9C:64:BE:37:F5:CD:8A:0B:EA
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 019F1868054E3F4292B816683D40C33C5909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number: 1994
Signing time: Tue 30 Jun 2026 12:01:38 +0000
Manifest this update: Tue 30 Jun 2026 12:01:38 +0000
Manifest next update: Wed 01 Jul 2026 12:01:38 +0000
Files and hashes: 1: 0IWvtKpWz8nwzfyztFPG-10e-ec.roa (hash: M3DL2KpstDY4RX5irHxTIoQ7SYVzPk7eR23DZZrDMbo=)
2: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: QsjKaIcT0UpmUy2HHLORmP6RCQTBMRZdnLzY4C609Ec=)
3: pYVSN2AB9mwBr8yDS1zYwXrTuMQ.roa (hash: xWYPQfiNQqIYcOLgwTTjRZ9fSTqKYlkmjs7r1ngIGF4=)
4: uXN7_MtPKMwhSTIFKpLUwo-V5P8.roa (hash: 8z/tTyMqQq524Fl02SLcRSjti3sQ0AEo40zN2vpCYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:68:05:4e:3f:42:92:b8:16:68:3d:40:c3:3c:59:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Jun 30 12:01:38 2026 GMT
Not After : Jul 1 12:01:38 2026 GMT
Subject: CN=1e2af1bd758b793d3d2bdf9c64be37f5cd8a0bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e5:c3:8f:f1:2f:74:00:e8:ba:9c:b5:13:dd:
88:3f:0d:d9:fc:8e:48:a7:95:e3:48:a7:45:e1:4b:
83:35:aa:a7:53:7b:a5:33:ba:2c:8a:95:04:b5:71:
d1:e8:34:f3:d9:7a:6c:67:8d:02:1d:2f:70:48:7a:
d5:a4:7b:07:32:aa:38:bf:78:c4:9d:9a:34:b8:29:
0f:d6:05:92:0c:2c:28:da:b1:98:41:34:da:3c:cd:
6a:cd:d1:23:24:34:9a:99:57:7f:8e:e3:ae:4d:23:
c0:2f:58:b7:cc:7d:33:dd:0c:54:69:d3:aa:40:e9:
25:83:0a:88:89:f4:bf:0c:08:33:22:cc:d4:42:2e:
88:13:eb:b1:86:bc:3e:b2:e5:57:ea:75:73:d1:af:
ae:0b:b1:53:ff:a1:d3:80:ae:7c:c0:41:e2:1a:14:
94:29:a7:0d:3c:be:65:11:a2:d1:85:b3:d3:98:e1:
b8:8f:6e:03:0e:7a:bc:13:a9:ef:38:2e:2a:85:c4:
6e:6a:d6:1a:e0:d7:05:de:c0:97:15:b3:38:45:9f:
06:7a:7b:ad:26:b4:43:4e:c0:bd:48:d3:86:6f:d0:
09:d8:aa:d4:ab:d7:b2:b8:29:a5:11:65:1d:bb:fe:
16:0f:77:70:67:79:17:4d:3a:de:c1:ad:04:56:58:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2A:F1:BD:75:8B:79:3D:3D:2B:DF:9C:64:BE:37:F5:CD:8A:0B:EA
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f8:d1:08:b4:3b:32:c5:5a:1c:a7:e4:19:4c:92:8a:a8:11:
71:8e:76:2a:14:d4:0c:9e:a4:c3:8d:f2:02:c6:b0:5d:1f:18:
7e:1d:3a:5e:0a:b4:35:20:e8:97:2a:2a:81:74:24:af:be:cf:
f9:7a:8d:2e:5d:9d:93:69:bc:3a:b2:0d:d0:f6:57:fa:18:40:
98:5c:f3:5e:ef:23:5f:eb:f4:d0:0f:86:db:57:43:23:99:6b:
b2:1a:be:3a:3d:93:24:63:a5:0c:f7:ba:56:62:a0:6d:c1:33:
02:b1:03:70:c8:da:9a:f4:70:9b:3e:39:33:83:fb:8a:b2:20:
58:4c:44:50:3b:08:1b:e8:3f:66:11:72:40:ab:54:66:3a:1f:
4d:3f:51:30:68:92:e1:1a:bb:7a:26:2b:70:9f:da:0c:94:be:
16:88:18:a9:d7:d2:85:b6:61:9a:aa:43:ba:d9:d5:d1:e2:43:
66:e6:5a:54:8c:ac:7b:fa:65:dc:ca:88:a0:bb:d8:1d:49:e3:
8a:8c:64:9b:87:7e:cf:23:2b:9b:04:76:1a:82:53:70:af:09:
05:10:90:32:11:a2:eb:2a:40:b1:f3:e0:e7:eb:b3:88:a1:20:
4b:bd:d0:68:f9:5b:84:ee:0d:c3:59:15:b1:a3:30:ae:3c:52:
80:d2:30:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:16 2026 by rpki-client